Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BOO5kmD9N-dlfoSULd70bK26TSI.roa
File: BOO5kmD9N-dlfoSULd70bK26TSI.roa (raw, json)
Hash identifier: hv2uUQjNoQXtRJqjtFlFIOJy7uVaGNacTtrWh9zBWik=
Subject key identifier: 04:E3:B9:92:60:FD:37:E7:65:7E:84:94:2D:DE:F4:6C:AD:BA:4D:22
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019D97687DF8930D0727F6CC0CC5D15C93DD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BOO5kmD9N-dlfoSULd70bK26TSI.roa
Signing time: Thu 16 Apr 2026 17:48:20 +0000
ROA not before: Thu 16 Apr 2026 17:48:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 84.32.6.0/24 maxlen: 24
84.32.136.0/22 maxlen: 22
88.216.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:68:7d:f8:93:0d:07:27:f6:cc:0c:c5:d1:5c:93:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 16 17:48:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e3b99260fd37e7657e84942ddef46cadba4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:a2:bb:f3:7a:33:b3:63:d1:8e:99:52:a4:
6a:6c:9a:aa:f7:21:08:36:b2:3a:b7:d5:b6:dc:ca:
09:6a:ed:7e:e6:91:4c:ee:dd:8e:05:cb:e6:20:06:
22:a5:8e:3e:73:17:aa:38:13:9e:b6:bd:d1:cd:0a:
25:1a:60:00:35:87:d3:74:b3:15:8e:8b:35:92:6b:
82:15:1e:fb:fc:04:2d:f7:a8:8c:fd:2c:cd:f9:d8:
4b:e8:5e:f0:d0:e3:4a:1c:fb:bb:2b:34:c7:79:8a:
3f:ba:fd:57:83:b5:53:a8:28:82:eb:41:5a:a3:e2:
9d:5e:bb:09:d4:de:ff:ad:41:cd:b9:57:ff:bc:42:
d4:bc:fc:51:93:99:db:89:21:b1:50:b4:ac:fc:eb:
13:ac:bf:19:86:70:d3:20:5d:78:34:40:15:e8:2c:
de:2d:b3:5f:a4:ab:d3:bf:54:94:6e:d6:0d:e1:c1:
ee:0b:ab:3c:d3:ce:73:b5:b8:0a:df:f4:a4:d7:ba:
36:71:1a:96:f2:c7:2a:5b:d5:e5:db:6b:dc:3d:71:
fc:cb:d0:e9:09:da:fa:99:91:79:2c:38:5b:87:68:
0f:7e:e2:b6:47:fc:37:42:ff:70:fa:f4:2e:4d:f5:
43:e6:91:86:10:0d:cc:ac:25:32:f4:9d:0c:aa:d0:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:B9:92:60:FD:37:E7:65:7E:84:94:2D:DE:F4:6C:AD:BA:4D:22
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BOO5kmD9N-dlfoSULd70bK26TSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.136.0/22
88.216.98.0/24
Signature Algorithm: sha256WithRSAEncryption
06:dc:36:41:8b:25:77:f8:d8:a3:66:d6:c1:33:46:e0:90:c8:
f5:9c:c7:64:56:cf:ca:5d:69:bc:a3:5d:81:68:03:72:98:20:
78:6d:4d:00:be:05:27:d6:ff:cf:43:12:14:af:c3:f3:d0:32:
59:3d:16:3e:71:7e:bf:54:ee:b4:0d:bc:7d:d0:c3:26:47:c1:
c9:98:77:13:c7:11:2d:92:1e:b3:26:89:f4:7e:b3:e4:e8:ca:
72:dd:39:6a:c3:b3:20:e9:5b:a2:1b:d0:0d:16:d9:9a:ec:a4:
af:6c:35:7e:9e:50:32:4f:eb:f8:68:aa:c3:53:eb:6d:b8:3b:
34:e4:b4:d9:ea:ec:53:e4:c0:35:41:67:cd:e1:fc:50:c7:19:
21:3e:4a:8c:ad:f1:c7:5c:b5:a2:f6:33:9c:68:81:90:b3:ab:
44:6f:02:82:8e:49:4e:bc:60:0c:b3:a1:a0:b0:22:60:38:31:
12:a7:e1:ae:71:e8:1b:70:63:5e:7f:12:10:d3:4f:9a:ad:15:
86:01:64:31:95:72:05:55:f7:49:01:dd:72:3b:24:84:7e:ab:
b2:a5:0e:a2:24:fc:2d:c6:4d:fd:7f:d1:b6:17:63:5f:d7:86:
da:db:b0:af:59:3e:fb:31:23:d8:af:67:a5:00:73:d4:fb:d3:
b1:83:84:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ2XaH34kw0HJ/bMDMXRXJPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwNDE2MTc0ODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGUzYjk5MjYwZmQzN2U3NjU3ZTg0OTQyZGRlZjQ2Y2FkYmE0ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAWiu/N6M7Nj0Y6ZUqRqbJqq9yEI
NrI6t9W23MoJau1+5pFM7t2OBcvmIAYipY4+cxeqOBOetr3RzQolGmAANYfTdLMV
jos1kmuCFR77/AQt96iM/SzN+dhL6F7w0ONKHPu7KzTHeYo/uv1Xg7VTqCiC60Fa
o+KdXrsJ1N7/rUHNuVf/vELUvPxRk5nbiSGxULSs/OsTrL8ZhnDTIF14NEAV6Cze
LbNfpKvTv1SUbtYN4cHuC6s8085ztbgK3/Sk17o2cRqW8scqW9Xl22vcPXH8y9Dp
Cdr6mZF5LDhbh2gPfuK2R/w3Qv9w+vQuTfVD5pGGEA3MrCUy9J0MqtCzZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFATjuZJg/TfnZX6ElC3e9Gytuk0iMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvQk9PNWttRDlOLWRsZm9TVUxkNzBiSzI2VFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCAGAwQC
VCCIAwQAWNhiMA0GCSqGSIb3DQEBCwUAA4IBAQAG3DZBiyV3+NijZtbBM0bgkMj1
nMdkVs/KXWm8o12BaANymCB4bU0AvgUn1v/PQxIUr8Pz0DJZPRY+cX6/VO60Dbx9
0MMmR8HJmHcTxxEtkh6zJon0frPk6Mpy3Tlqw7Mg6VuiG9ANFtma7KSvbDV+nlAy
T+v4aKrDU+ttuDs05LTZ6uxT5MA1QWfN4fxQxxkhPkqMrfHHXLWi9jOcaIGQs6tE
bwKCjklOvGAMs6GgsCJgODESp+GucegbcGNefxIQ00+arRWGAWQxlXIFVfdJAd1y
OySEfquypQ6iJPwtxk39f9G2F2Nf14ba27CvWT77MSPYr2elAHPU+9Oxg4TJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:32 2026 by rpki-client